By the way, is there a reason you’re generating your own CSR? In stead of just getting a client to handle that sort of thing? Because Let’s Encrypt doesn’t sign the CSR directly. It will only pick the information it needs to generate a certificate and effectively will ignore everything else.

I’ve been trying to run my own web service for an alexa skill for the amazon echo dot, but I’m constantly running into various problems so I’m troubleshooting and trying to fix the issues. I’m pretty frustrated about it.